
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier: zOY3TzBKJ9B/RGbdeLsAbgllN5GIAV9j35wvYVQBoag=
Subject key identifier: AD:57:88:50:2E:E7:A4:48:DE:90:9E:03:BA:AF:7D:FD:5B:41:8A:C4
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 019CC8D1065DC6752F5FF3A0C2A0F24EDAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number: 1884
Signing time: Sat 07 Mar 2026 15:01:07 +0000
Manifest this update: Sat 07 Mar 2026 15:01:07 +0000
Manifest next update: Sun 08 Mar 2026 15:01:07 +0000
Files and hashes: 1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: 4IUQyQqB6JtXNWI2imG6zTmn5Vt1wKOW0yhtD7IW0iE=)
4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=)
7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
11: TYy0_7J7KDgPFXIQznrWkATWKoo.roa (hash: S3jUpVJhOWtNPETQx6yVyRUSNY9H4HAxcLvNiQwtEuc=)
12: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
13: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
14: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
15: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
16: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
17: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
18: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=)
19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
21: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d1:06:5d:c6:75:2f:5f:f3:a0:c2:a0:f2:4e:da:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Mar 7 15:01:07 2026 GMT
Not After : Mar 8 15:01:07 2026 GMT
Subject: CN=ad5788502ee7a448de909e03baaf7dfd5b418ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:87:4d:3b:2f:58:db:00:c7:ea:73:ba:80:
78:54:ef:92:31:a7:84:4f:c2:2f:1e:9b:c3:25:a2:
aa:1f:ee:0a:1c:e2:c9:6b:37:c7:64:c7:97:6a:a8:
1a:24:c3:42:1c:25:2d:ac:d6:3c:6b:e5:f3:80:b5:
58:0a:b6:33:41:d1:8d:4a:61:03:1a:3c:a7:94:a1:
7a:46:43:cd:c8:ae:d6:af:6f:a9:68:61:e1:e5:81:
94:b1:69:9e:e9:fb:9a:ed:48:f5:42:b7:f1:d3:9c:
81:77:e4:39:a8:39:d3:a9:b6:4b:1f:11:ac:da:f2:
2e:76:05:b9:ec:69:ab:b1:eb:8b:ae:09:51:03:61:
5b:08:40:ad:e0:0f:0e:26:f0:0d:c2:fb:ab:f8:2a:
79:a7:a0:9a:6a:17:12:a7:fd:d5:54:c3:a9:93:3c:
88:4f:74:d8:9d:61:74:5f:e4:eb:de:4a:7e:9c:e5:
f5:3c:2f:97:aa:f7:25:20:cb:4d:9f:06:de:be:2d:
00:43:96:ce:b4:fb:5b:10:b3:fc:c0:10:2e:c8:3a:
0e:47:0e:21:5b:c6:ff:6f:5f:36:d6:cc:de:b8:c7:
7b:1b:52:5f:65:bd:7e:2f:8e:8e:33:ec:41:ed:e4:
45:a1:ff:7d:a5:62:de:8f:80:d8:9e:6a:1c:f6:d0:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:57:88:50:2E:E7:A4:48:DE:90:9E:03:BA:AF:7D:FD:5B:41:8A:C4
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1c:53:de:4e:e7:57:85:96:ed:bb:91:9b:14:1f:ae:97:63:
fb:a8:29:e8:b4:b4:b2:01:f0:ee:cf:42:a3:54:86:1f:41:0e:
fc:cd:57:cb:2b:29:5e:eb:63:eb:7d:0e:30:d9:f8:ff:45:e3:
70:0b:a2:28:59:60:c1:68:58:0e:72:d7:a2:e9:62:fb:7c:c4:
57:09:eb:6e:6b:5d:8a:72:95:97:a5:94:9b:4e:1c:65:c9:e9:
ae:d9:6f:0c:70:f6:31:8a:7d:54:f2:b2:e9:c8:a2:53:87:18:
6a:47:0b:89:41:8b:55:af:44:b6:d1:75:5a:55:a8:8d:38:b9:
0f:c5:09:db:24:88:5f:8f:f0:c0:c1:ca:16:c3:c5:b8:ce:30:
c3:e5:e7:ef:39:ec:ac:04:58:73:43:9e:8d:bb:5b:97:d9:e0:
43:b7:a3:d9:8e:91:75:67:17:21:a8:01:c7:4c:16:6f:cf:3c:
2e:3d:b6:9d:1d:ac:e6:ca:63:34:37:1c:29:67:1d:1f:a3:4c:
97:6f:ba:93:59:0b:87:3d:bc:67:2e:57:17:ed:60:84:1f:52:
9f:80:f0:83:20:bb:a5:9b:b4:7e:6c:c9:d2:a5:26:9e:09:07:
ac:a3:3f:83:ea:0b:d3:3a:6d:ac:98:b1:af:d9:71:5e:b0:4f:
e7:7f:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:01:10 2026 by rpki-client